What is a proptech data breach protocol and how should tenants be notified if one occurs?

A proptech data breach protocol outlines the steps a property management platform must follow if tenant data, such as personal information, payment details, or screening records, is compromised.

Core Elements of a Breach Protocol

• Immediate containment and investigation begins as soon as a breach is discovered, identifying the scope of affected data and how the breach occurred.
• Legal and regulatory assessment determines which state or federal notification laws apply, since breach notification requirements and timelines vary significantly by jurisdiction.

How Tenants Should Be Notified

• Timely, clear written notice explaining what data was affected, when the breach occurred, and what steps the company is taking is typically required under most state breach notification laws.
• Practical guidance for affected tenants, such as recommendations to monitor credit reports or change passwords, should accompany the notification.

Because breach notification requirements vary by state, proptech companies typically work with legal counsel to ensure tenant notification meets every applicable jurisdiction's specific timing and content requirements.